Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
File: 90REoIZ_zKmjVpwf0JITNUajf0s.mft (raw, json)
Hash identifier: uwo33gpDyQD6ImOySERH0qo2r+k36xlYvI3eLDqbMPc=
Subject key identifier: B9:DE:41:EF:62:B7:04:C5:B1:B5:AB:69:31:A7:AD:BE:F0:32:2E:FA
Authority key identifier: F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
Certificate issuer: /CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Certificate serial: 01936BC863D45EADE8C611D322E2DF833D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
Manifest number: 130B
Signing time: Wed 27 Nov 2024 04:01:54 +0000
Manifest this update: Wed 27 Nov 2024 04:01:54 +0000
Manifest next update: Thu 28 Nov 2024 04:01:54 +0000
Files and hashes: 1: 90REoIZ_zKmjVpwf0JITNUajf0s.crl (hash: XCxoCSOfmzgb7MLZuElTUX+WtjMAsPnK6/zcwYzeeqI=)
2: C361pkf2kMH7LVb5jk56viIKncs.roa (hash: Q50b/CcXDqbyEtSCq248vPerGFmxPXHY43PklPPHnI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6b:c8:63:d4:5e:ad:e8:c6:11:d3:22:e2:df:83:3d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f74444a0867fcca9a3569c1fd092133546a37f4b
Validity
Not Before: Nov 27 04:01:54 2024 GMT
Not After : Nov 28 04:01:54 2024 GMT
Subject: CN=b9de41ef62b704c5b1b5ab6931a7adbef0322efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:c0:3c:2b:75:8d:d6:b9:1f:dd:b7:3f:66:
9c:eb:df:dd:9e:86:f3:18:b7:69:56:3a:f4:00:43:
f5:5f:a6:47:0c:0f:54:29:1d:75:cd:33:89:8d:f6:
a1:b6:0f:59:3b:7d:f5:d6:e1:61:43:c4:7d:3d:08:
c0:f2:0b:dd:78:fc:ea:56:48:8b:3f:58:f5:2b:20:
4e:71:90:0c:b3:34:d1:31:8b:05:23:5c:b9:04:66:
db:47:7b:4b:e9:28:6f:21:5d:c1:ed:fc:98:75:18:
a3:99:70:73:ff:d9:f5:ae:1a:45:f9:7e:74:71:80:
95:c5:90:d3:49:3f:2a:fa:d2:5e:3f:2d:e9:aa:7d:
7e:13:5c:6b:4b:ac:87:f4:86:5f:98:c5:b6:cc:e9:
44:43:82:56:d2:5c:50:b1:d7:2b:b9:8f:18:d3:b2:
f1:bc:68:6c:c4:44:f6:a8:0a:4a:2a:62:47:f5:9e:
00:94:b7:42:2b:a3:df:96:59:dc:2f:91:17:14:d5:
49:ec:8a:f8:d6:74:42:30:66:7f:a7:c5:32:86:4c:
46:25:a0:ed:6b:c7:b6:f7:e0:ed:1e:55:38:62:47:
a6:ca:36:57:5a:3d:2a:ce:9f:d9:47:36:18:80:69:
a4:ba:b5:8c:fc:50:3b:72:7f:2b:34:a8:60:f7:fe:
2e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:DE:41:EF:62:B7:04:C5:B1:B5:AB:69:31:A7:AD:BE:F0:32:2E:FA
X509v3 Authority Key Identifier:
keyid:F7:44:44:A0:86:7F:CC:A9:A3:56:9C:1F:D0:92:13:35:46:A3:7F:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90REoIZ_zKmjVpwf0JITNUajf0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/f64053-b938-4c51-8ec5-5d25244e4aad/1/90REoIZ_zKmjVpwf0JITNUajf0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c3:cb:ac:07:5b:bc:6b:33:c6:7b:d4:98:83:5d:8c:41:18:
6b:b6:48:b7:86:8c:8f:19:36:8d:8d:71:fb:1f:84:19:a9:6c:
7b:c2:5e:3e:ce:66:9a:15:c1:e3:78:da:e3:60:10:24:4d:b8:
98:7c:e6:7f:aa:00:6e:dd:d9:8f:4c:17:80:2d:1d:c1:d8:8b:
33:5f:87:72:19:d2:f0:16:e4:90:4e:df:a9:b3:25:34:15:48:
54:88:91:e5:bd:0c:1e:64:26:a5:21:56:99:bf:5f:b3:f7:e9:
9a:8c:85:ee:15:b8:25:f1:98:e6:cf:f8:01:dd:cc:41:fa:97:
28:87:3f:b3:45:6e:86:ee:51:ff:e5:55:51:8a:67:13:73:75:
bc:04:74:03:ab:61:47:54:42:d7:4a:8b:46:bb:4e:3f:6b:aa:
26:91:ed:1e:e6:a6:ff:ec:a3:81:e8:ce:6a:01:0b:1e:8d:ce:
0f:7a:45:04:0e:b6:32:81:14:fd:99:51:8c:2d:ae:df:75:3d:
a0:15:0a:cd:d8:e3:a5:dc:d1:cd:ed:65:0f:67:72:ca:cb:d9:
37:fb:12:9e:7e:3d:4d:63:02:0c:43:3f:32:84:73:90:8c:25:
e5:1b:e9:66:42:1a:e7:fd:56:31:b6:c5:f0:14:2c:45:51:f1:
65:23:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 09:34:00 2024 by rpki-client on console-ams.rpki-client.org